Security fixes
- DLA-4621-1 glibc for Debian 11 "Bullseye" . Security issues in glibc were fixed. Fixed in
2.31-13+deb11u14. - DSA-6331-1 keystone for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in keystone could lead to authorisation bypass, privilege escalation, user impersonation or incomplete termination of access privileges. Fixed in Trixie
2:27.0.0-3+deb13u4, Bookworm2:22.0.2-0+deb12u3. - DLA-4622-1 libxml2 for Debian 11 "Bullseye" . Bugs in libxml2 were fixed. Catalog parsing functions were missing cycle detection. Fixed in
2.9.10+dfsg-6.7+deb11u10. - DLA-4623-1 jackson-core for Debian 11 "Bullseye" . Bugs in jackson-core could allow an attacker to cause a denial of service by using deeply nested JSON data or disclose sensitive information by abusing a flaw in how certain exception messages are handled in jackson- core. Fixed in
2.14.1-2~deb11u1. - DSA-6328-1 tomcat10 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in tomcat10 could lead to a denial of service, authentication bypass or the disclosure of sensitive information. Fixed in Trixie
10.1.55-1~deb13u1, Bookworm10.1.55-1~deb12u1. - DSA-6329-1 tomcat11 for Debian 13 "Trixie" . Bugs in tomcat11 could lead to a denial of service, authentication bypass or the disclosure of sensitive information. Fixed in
11.0.22-1~deb13u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).